This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json) Hash identifier: WTvgbBGdyz1OwWygBAwXn8M1MdK5jMg9atEpNJDSZnU= Subject key identifier: 81:1F:C5:A9:0C:AD:BB:62:86:DD:B4:A6:27:0B:51:BB:88:0F:47:17 Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3 Certificate serial: 019B3DFE70E3FDD166B601FE4CB9D769FF2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:00:43 +0000 Manifest this update: Sat 20 Dec 2025 23:00:43 +0000 Manifest next update: Sun 21 Dec 2025 23:00:43 +0000 Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=) 2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: WOkCoySnVK9SeqfIXOqTnyWuoQzrFv25p4GPvKxmL4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:70:e3:fd:d1:66:b6:01:fe:4c:b9:d7:69:ff:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3 Validity Not Before: Dec 20 23:00:43 2025 GMT Not After : Dec 21 23:00:43 2025 GMT Subject: CN=811fc5a90cadbb6286ddb4a6270b51bb880f4717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:40:32:10:1e:6b:a8:9d:00:d3:7f:e7:d7: 47:a6:6f:61:03:f4:0b:ef:be:9a:00:e4:9f:7c:76: 85:ca:c2:62:bb:9d:fb:45:78:4d:30:44:63:aa:42: 3d:2d:92:bd:45:ba:a5:64:b6:94:96:f9:40:a0:02: 58:e8:7f:27:57:48:53:fe:cf:f5:63:d7:a4:41:fe: 33:0e:1e:f2:b4:2c:f5:5e:a7:26:4d:81:8d:fd:9b: ad:7e:14:a4:b7:a9:eb:16:28:e1:ab:12:1b:e3:9c: 65:36:42:29:f4:98:e7:7d:90:d8:13:39:b6:25:93: de:a0:72:81:ee:e9:31:5e:54:23:14:74:c6:84:10: 09:b4:65:a5:d2:1e:77:bc:ac:48:0f:ba:de:e6:d3: cf:9f:9b:89:dd:0c:ac:e7:77:1e:da:de:0c:13:88: 90:b4:8a:46:aa:92:c2:25:cf:48:bf:82:86:33:d7: b8:5a:14:9d:88:4c:a0:bc:68:58:8c:5c:2b:ab:9a: 58:86:01:32:a1:54:1b:1c:d1:13:c8:8d:cf:9a:85: 6a:c1:a3:bc:43:5d:8e:b7:00:4c:2f:ac:78:84:cb: cb:d9:16:e4:8f:51:b1:c0:3e:d2:ea:0d:f1:c5:0c: 6c:4f:d0:01:01:10:eb:de:43:f6:bc:51:19:fc:eb: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1F:C5:A9:0C:AD:BB:62:86:DD:B4:A6:27:0B:51:BB:88:0F:47:17 X509v3 Authority Key Identifier: keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e2:7b:28:04:09:19:a0:dd:9b:6e:d4:96:ef:3b:03:77:31: 03:d6:b5:fa:57:1e:bb:7e:ae:0c:08:18:1b:93:ec:a2:aa:1e: 5d:e6:d5:de:54:57:6d:fb:d4:12:f0:20:c0:56:71:b8:d3:5b: 6c:6a:bc:4b:bf:ec:a5:c3:e0:f1:53:2e:8f:b0:de:63:a0:69: 79:fe:76:aa:df:dc:7e:c2:95:26:a8:f5:92:af:ad:7b:79:fa: db:f8:66:7e:47:6b:f7:52:5f:10:da:d7:9d:7e:c4:05:df:59: 4b:f4:ce:6f:f8:81:c0:ae:38:9e:76:75:c6:6e:46:ec:c2:e9: f1:a2:73:34:89:b9:38:bd:83:cb:18:7a:5f:96:ac:a3:12:a2: 83:3f:52:ac:03:a7:3c:d8:66:83:74:0d:f8:19:a9:a6:95:b2: 37:e8:69:4b:34:10:6a:71:2a:6a:96:79:fd:20:b4:74:7f:f2: bb:db:97:11:f8:bb:20:e2:a9:26:0f:48:c6:44:3c:85:de:87: fc:45:66:48:fc:5a:6a:66:9b:c3:2d:48:15:5c:b2:90:68:b6: af:30:d2:19:d2:52:49:17:bb:7f:ac:d2:b1:29:4b:ae:ce:c5: d0:14:cd:e6:51:98:ae:d5:ee:be:06:ea:ae:05:c7:2a:8d:89: 47:70:7c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nDj/dFmtgH+TLnXaf8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODdiYzEyZWIyZGUyOWExMDI2YjhmNTZiZThkNDY5ZjJm NThjZjMwHhcNMjUxMjIwMjMwMDQzWhcNMjUxMjIxMjMwMDQzWjAzMTEwLwYDVQQD Eyg4MTFmYzVhOTBjYWRiYjYyODZkZGI0YTYyNzBiNTFiYjg4MGY0NzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9FAMhAea6idANN/59dHpm9hA/QL 776aAOSffHaFysJiu537RXhNMERjqkI9LZK9RbqlZLaUlvlAoAJY6H8nV0hT/s/1 Y9ekQf4zDh7ytCz1XqcmTYGN/ZutfhSkt6nrFijhqxIb45xlNkIp9JjnfZDYEzm2 JZPeoHKB7ukxXlQjFHTGhBAJtGWl0h53vKxID7re5tPPn5uJ3Qys53ce2t4ME4iQ tIpGqpLCJc9Iv4KGM9e4WhSdiEygvGhYjFwrq5pYhgEyoVQbHNETyI3PmoVqwaO8 Q12OtwBML6x4hMvL2Rbkj1GxwD7S6g3xxQxsT9ABARDr3kP2vFEZ/Os2vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEfxakMrbtiht20picLUbuID0cXMB8GA1UdIwQY MBaAFLWHvBLrLeKaECa49Wvo1Gny9YzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTIt N2U1MmU3NDljM2FkLzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTItN2U1MmU3NDljM2Fk LzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuJ7KAQJ GaDdm27Ulu87A3cxA9a1+lceu36uDAgYG5PsoqoeXebV3lRXbfvUEvAgwFZxuNNb bGq8S7/spcPg8VMuj7DeY6Bpef52qt/cfsKVJqj1kq+te3n62/hmfkdr91JfENrX nX7EBd9ZS/TOb/iBwK44nnZ1xm5G7MLp8aJzNIm5OL2Dyxh6X5asoxKigz9SrAOn PNhmg3QN+BmpppWyN+hpSzQQanEqapZ5/SC0dH/yu9uXEfi7IOKpJg9IxkQ8hd6H /EVmSPxaamabwy1IFVyykGi2rzDSGdJSSRe7f6zSsSlLrs7F0BTN5lGYrtXuvgbq rgXHKo2JR3B8aA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:47 2025 by rpki-client